Spamassassin sample rules to use Octopus RBL Monster https://octopusrbl.monster/ - bl.octopusdns.com

octopusrbl_monster.cf.sample

# Spamassassin sample rules to use Octopus RBL Monster https://octopusrbl.monster/
# gist by Gergely Nagy (https://gist.github.com/gnanet) 2024-11-13
#
#
# IMPORTANT NOTE
#
# Citing Octopus RBL (https://octopusrbl.monster/blocklist-use.html):
# Small dns servers can use our blacklist for free.
# High Volume servers (more than 100 requests per second) need monthly subscription.
#
#
# ** IT'S STRONGLY ADVISED TO USE A LOCAL CACHING RESOLVER FOR DNS LOOKUPS **
# After the caching dns-resolver is in place, provide the host+port like one
# of the below form:
#
# dns_server 127.0.0.1:10053
# dns_server 127.0.0.1:53
#


# Notes by me
# Rules below are scored ad-hoc by me, you should analyse the messages and adjust the scoring 

header     __RCVD_OCTOPUS_MONSTER     eval:check_rbl('octopus-monster-rcvd', 'bl.octopusdns.com.')
describe   __RCVD_OCTOPUS_MONSTER     Listed in Octopus Monster RBL
tflags     __RCVD_OCTOPUS_MONSTER     net

header     RCVD_OCTOPUS_MONSTER_BL2    eval:check_rbl_sub('octopus-monster-rcvd', '127.0.0.2')
describe   RCVD_OCTOPUS_MONSTER_BL2    blacklisted by Octopus RBL Monster L2
tflags     RCVD_OCTOPUS_MONSTER_BL2    net
score      RCVD_OCTOPUS_MONSTER_BL2    3.0

header     RCVD_OCTOPUS_MONSTER_BL3    eval:check_rbl_sub('octopus-monster-rcvd', '127.0.0.3')
describe   RCVD_OCTOPUS_MONSTER_BL3    blacklisted by Octopus RBL Monster L3
tflags     RCVD_OCTOPUS_MONSTER_BL3    net
score      RCVD_OCTOPUS_MONSTER_BL3    3.5

header     RCVD_OCTOPUS_MONSTER_BL4    eval:check_rbl_sub('octopus-monster-rcvd', '127.0.0.4')
describe   RCVD_OCTOPUS_MONSTER_BL4    blacklisted by Octopus RBL Monster L4
tflags     RCVD_OCTOPUS_MONSTER_BL4    net
score      RCVD_OCTOPUS_MONSTER_BL4    4.0

header     RCVD_OCTOPUS_MONSTER_BLF    eval:check_rbl_sub('octopus-monster-rcvd', '127.0.0.9')
describe   RCVD_OCTOPUS_MONSTER_BLF    fresh blacklisted by Octopus RBL Monster
tflags     RCVD_OCTOPUS_MONSTER_BLF    net
score      RCVD_OCTOPUS_MONSTER_BLF    5.0

# Rules below should be scored depending on your support against Putin war in Ukraine

header     RCVD_OCTOPUS_MONSTER_BL_VPSY    eval:check_rbl_sub('octopus-monster-rcvd', '127.0.0.5')
describe   RCVD_OCTOPUS_MONSTER_BL_VPSY    sanction against Syrian Arab Republic because of Putin war in Ukraine by Octopus RBL Monster
tflags     RCVD_OCTOPUS_MONSTER_BL_VPSY    net
# score      RCVD_OCTOPUS_MONSTER_BL_VPSY    


header     RCVD_OCTOPUS_MONSTER_BL_VPLY    eval:check_rbl_sub('octopus-monster-rcvd', '127.0.0.7')
describe   RCVD_OCTOPUS_MONSTER_BL_VPLY    sanction against Libya because of Putin war in Ukraine by Octopus RBL Monster
tflags     RCVD_OCTOPUS_MONSTER_BL_VPLY    net
# score      RCVD_OCTOPUS_MONSTER_BL_VPLY    


header     RCVD_OCTOPUS_MONSTER_BL_VPF    eval:check_rbl_sub('octopus-monster-rcvd', '127.0.0.8')
describe   RCVD_OCTOPUS_MONSTER_BL_VPF    Putin friends blacklisted by Octopus RBL Monster
tflags     RCVD_OCTOPUS_MONSTER_BL_VPF    net
# score      RCVD_OCTOPUS_MONSTER_BL_VPF